Inside the mind of a serial liar – and a new company name!

The tactics of scammers Cristian Mihai and Alin Chiriac remind me of the time when I investigated a case which involved a husband who cheated his wife out of all her assets. He would sleep with other women, rape one woman (about which we found video evidence), have several secret bank accounts, ten or more signatures, more than ten names, more than 15 addresses, guns, truckloads of ammunition, two passports…

When we submitted the 100-page report to the wife to give to the police, she did not believe the data. For example, we would say, ‘Here, your husband is using a ninth name,’ and she would interrupt us and just say that it was a simple typo or mistake made by the bank.

Then we would show her other evidence of his address variations and she would say that it might have been an honest error.

One-hundred pages of proof did not convince her. Amazing how the mind works. When you study the mind of innocent people, you will see that they cannot connect the dots, and they excuse any variation as a simple error. Yet go inside the mind of a thief, liar, con artist and fraudster, and you will see that their sinister small, yet active brain is always plotting and scheming. They like to confuse people in any way possible.

For example, if their name is John Smith, and you ask them to sign a contract, and you accidentally write down Jon Smyth, they will not correct you. They would love to create a new profile and a new identity. If their phone number is 12345 and you ask them of their area code is 44, they will say yes, even if it is not, just so that you can never find them. They will use new signatures and give you an old address, and even then, they will twist the old address, so if it is Mihai Sebastian nr 58, they will say number 85. Or if it is Number 137 bl S7 sc 1 ap 52, they will say Number 173, bl S7 sc 2 ap 25. Bit by bit, they drop out of all computer searches, and in no time, there is a Rubik’s Cube style of profile that no one can unravel.

To someone like me, the smallest and tiniest alteration to data rings loud alarm bells. I am instantly suspicious of any variation.

When it comes to Alin Chiriac and Cristian Mihai, they amaze me because they have used so many company names and addresses. Often they can justify it, but when you dig deeper, you will see that they delight in confusing everyone, so that later, no one can catch them.

If you recall, these two fraudsters operate www.twenty.ro as an interactive agency. They have so many company names, we are yet to find half of them. They use Helperso Soft, Twenty, Twenty Interactive, Twenty Advertising, Twenty Mark (pursued by the Romanian Government for owing them over US$300,000), Mando, Screentek, Adevox, and others we have listed on this site.

But now we have a new one. It is called SAGA SOFT. How fascinating that this site talks about the ‘Alin Chiriac and Cristian Mihai Saga’. For us, ‘saga’ means ‘problematic story’. But to our surprise, we find out that they are, in fact, associated with this company. Cristian Mihai has a website called www.SagaSoft.ro for a company called Saga Software.

He might argue that this is not his company or that he just registered it for a client. Either way, it does not stack up, and more needs to be investigated. If it was registered for a client, then we can say that he is defrauding the client.

See below for an explanation of this statement, and also for why we are even more suspicious…

If Cristian Mihai will argue that this site was registered for a client, then we would warn the client that they are in danger because the site is not in their name. This would be like buying a house and asking your lawyer to finalise all the legal documents, and in so doing, your lawyer puts the house in his name. You live in the house and maybe die in the house, but all along, unbeknown to you, it was never your asset. A domain, if registered for a client, must be registered in the client’s name. If Cristian Mihai is going to say that he forgot to change it over, we have to ask:

a) Why was it in his name in the first place? That is bad practice and bad form and something all clients should watch out for. There is never any reason to do this where a legitimate business is concerned.

b) If he did forget, this is hard to believe because in a previous blog here we find out that they did something similar with another client where they conveniently (and we say he did this on purpose) placed the Twenty company’s email address as the place where all of the client’s customer enquiries are to go. This meant that the client whom they conned, never received any emails. Intercepting emails and client contacts must be illegal. Mail theft in cyberspace must surely be as bad as someone stealing all your mail from your letterbox outside your home.

Maybe they have the client’s permission to register the Saga Soft site under Cristian’s name, and if that is the case, it is way too fishy. Why so? Dear or dear none of this looks good, no matter the explanation.

You can see here that we are told that Saga Soft is a company whose location is Trifoi 16. But this is the address of Twenty.ro. How can Saga Soft have the address of Trifoi 16?

Here we see that Saga Software has many addresses, so why do they need yet another? Suspicion mounts.

However, all of this is to bring you to this point. Take a good look at the registration notice. What do you see? What rings the alarm bells for you? Come on, work the detective in you. How can you become a mystery writer or the new Sherlock Holmes if you do not pay attention? See below. It shows the company listed at an office owned by Twenty. This could mean that Cristian owns the company, or that he is helping a friend to hide something, or that he conveniently forgot to re-register the name, which means he is defrauding his friend or client. But what do you see that rings an alarm bell?

Ok, here is a clue…

What do you notice about this phone number? There are two bells that ring for me. The first is that it is a +1 number, which cannot be the case. Plus-one refers to the USA. It points to a USA location. You could say that they have an office in the USA, as we discovered with Screentek in another blog. Sure, maybe they used their Romanian Twenty address and innocently used their USA contact number. Ok, let’s phone this number. It does not work. Why? Maybe it is an old number. Of course such things happen, and data becomes old. So maybe I should not be so concerned. But when you deal with con artists like Chiriac and Mihai, you have to be very very concerned.

My dear friends, the second alarm bell is ringing because this number is familiar to us. If you had read earlier blogs, you would recall that Arond Net (one of their first company names) had a similar number. Here it is ending in the same 256059:

And so we see further that a newsletter has been registered as SagaNewsLetter.com

If we check out the owners of this newsletter, it is the same person who owns Twenty Advertising — the company being sued by the Romanian Government for US$300,000. Twenty Advertising is not in operation. It is in liquidation! The owner is none other than Cristian Mihai, as this report dated 24 September 2009 says, showing the owner at email Cristian@Twenty.ro:

And if we investigate the real owners of the company ‘Saga Soft’ with the Romanian Government we see this:

SAGA SOFTWARE SRL

Judet :Municipiul Bucuresti, Localitate :BUCURESTI SECTORUL 2
Numar de ordine in Registrul Comertului sub nr. J40/9039/2005 din 19.5.2005
Stare firma :
- functiune
- certificat de inmatriculare preschimbat
- bilantul anual nedepus la registrul comertului pe anul 2008
Durata societatii: nelimitata.
Sediu :STR. POPA SOARE nr. 69 sector 2 cod postal 23982
Cod unic de inregistrare :17602787
Telefon :0728824804
Data ultimei inregistrari la RC :14-05-2009

Date despre asociati:

- persoane fizice

1) Nume:NICA SORIN
Cetatenie :romana
Data nasterii :09-07-1974
Locul nasterii :Bucuresti,.
Total aport :1900.00 RON.
Nr. total actiuni / parti sociale :19
Procent beneficii si pierderi :95 % 

2) Nume:SOARE IONEL – BOGDAN
Cetatenie :romana
Data nasterii :19-09-1982
Locul nasterii :Tirgoviste,Dimbovita
Total aport :100.00 RON.
Nr. total actiuni / parti sociale :1
Procent beneficii si pierderi :5 %

Nu are asociati persoane juridice

Nu are asociati tip lista

Date despre administratori / lichidatori / cenzori

1) Nume: NICA SORIN
Cetatenie :romana
Puteri: DEPLINE
Calitate / Functie:administrator / nespecificata
Data nasterii: 09-07-1974
Locul nasterii:BUCUREsTI,.
Data numirii: 05-05-2009
Durata mandatului: nespecificata.

And if we trace a Mr Nica Sorin we find out that he is NOT the owner. Oh dear, what could this mean? A messy messy messy chain of events. One has to wonder how far this web of deceit goes. We do know more, but the legal framework would not allow us to show you the data we have, because it would break certain rules. But we are allowed to share the whole file with the authorities so that’s great news.

By the way, it is so difficult to end any blog on this site. Because I sit up writing this blog for you, and I want to publish it, but there is always more to tell you. So much more. For example, I have to think through what you might be thinking. And I have to wonder if you, like my client who could not believe that her husband had ten names and endless criminal acivities, would dismiss some of this is an innocent mistake.

Ok, so let’s take just one of many. You might say, ‘Hey Hunter, you do milk a story. You do over exaggerate. You take a simple thing and enlarge it.’ For example, you might say that I am making a big deal about old data. No it is not old data. The company information was retrieved only last week. The site checks were made last week.

Ah, yes but you can still argue with the Hunter and say that my query might have taken place last week, but their forms were submitted ages ago, and those forms are now old. Wrong again dear friend. I would not be wasting your time if that were the case. Look again at the images above. You can see when files were created and when they were updated.

Here is another way that we can find out about the domain names owned by Cristian Mihai, using the Twenty.ro address. But hey, he has many more registered as Cristian@Overbridge.ro etc (but we will show you these at another time).

This shows that Cristian@Twenty.ro owns a range of domains. The one listed as number 4 is for the Saga newsletter, which was updated on the 10th of Feb 09 and the 14th of April 09 and four other times. Each time it was to change some minor point just to keep us guessing and to keep us confused. We are not confused. We are not amused. We see right through your scams and schemes Mr Mihai.

Here are others using other emails. We have logged them all, including all archives and all history. That is why we needed a 1 Tb hard drive.

And as for Mr Alin Chiriac, he has similar activities. We have them all logged. We will share them with you soon.

Meanwhile, you will not hear from us for about ten days while we focus on our legal presentations, which will take up most of our time. So see you in about ten days. Meanwhile, keep your emails coming. Write to me at TwentyScam@Hotmail.co.uk and all your information will remain confidential.

If only we could show you the really juicy stuff we find out. On this site, we can only show you what is permitted by law. Even then, the information we show you is not easy to find, unless you know what you are looking for. In my case, I am not looking for anything… I am looking for EVERYTHING. And my team and I could spend 200 hours going down a path that leads to nothing. Then again, it is worth the effort because every now and then, we spend 200 hours and we hear alarm bells. Them bells! Them bells!

Pay your staff and pay your clients Mihai and Chiriac. You owe them the money. Do it before the judge orders you to do it. You cannot hide. You stole. You lied. You cheated. So stop blaming other people.